Blocking Incoming Traffic

We would like to add a firewall rule that blocks incoming IIS traffic to workstations.  The scenario is as follows:

Both computer A and B are windows workstations

Both A and B are on the same IP network (this is how we found the issue)

Computer A can connect to computer B through IIS

Is there a rule that can be created in the Endpoint Portection Firewall to block this?  We (server admins) occasionally use IIS to communicate with servers and our developers occasionally use it as well but there should not be any incoming requests to a workstation on IIS.